CWE-124: Buffer Underwrite
The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.
Also known as Buffer Underrun, Buffer Underflow.
A kind of CWE-786 Access of Memory Location Before Start of Buffer.
From the CWE List. © The MITRE Corporation.
Newest
- ibm mq appliance IBM MQ Appliance is affected by an improper validation vulnerability 5.4 Medium
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +8 more +10 more Microsoft Office Excel Remote Code Execution Vulnerability 8.8 High
- imagemagick ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder 6.3 Medium
- postgresql psqlodbc psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters 5.9 Medium
- ibm datapower gateway 10.5.0, datapower gateway, datapower gateway 10.6.0 +2 more +4 more IBM DataPower Gateway Buffer Underwrite 7.5 High
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 more An attacker that has valid credentials can submit a Sieve script containing an extreme numeric... 4.3 Medium
- vim Vim: Out-of-bounds Access in Popup Opacity Handling 4.6 Medium
- op-tee optee os OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations 8.4 High
- eclipse openj9 Eclipse OpenJ9 : Using -Xtrace to trace method arguments can lead to buffer underflow 5.8 Medium
- hdfgroup hdf5 Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero 5.9 Medium
- apache http server Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow 9.8 Critical
- amd epyc™ 4004, epyc™ 4005, ryzen™ 6000 series processors with radeon™ graphics +14 more +16 more Improper input validation in the System Management Mode (SMM) communications buffer could allow a... 4.6 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 more A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools... 8.2 High
- toddr yaml::syck YAML::Syck versions before 1.38 for Perl has an out-of-bounds read 7.3 High
- wazuh Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string() 6.5 Medium
- wazuh Wazuh: Heap-based NULL WRITE Buffer Underflow in GetAlertData 4.4 Medium
- cisco ios xe software, ios xe +1 more A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series... 6.1 Medium
- vim Vim has Heap-based Buffer Underflow in Emacs tags parsing 5.3 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() 6.5 Medium
- amd epyc™ 9004 series processors, epyc™ 9005 series processors, epyc™ embedded 9004 series processors (formerly codenamed "genoa") +15 more +17 more Improper input validation in the SMM communications buffer could allow a privileged attacker to... 4.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Glib: glib: local denial of service via buffer underflow in content type parsing 2.8 Low
- capstone-engine capstone Capstone doesn't check vsnprintf return in SStream_concat, allows stack buffer underflow and overflow 4.8 Medium
- openprinting cups OpenPrinting CUPS vulnerable to stack based out-of-bound write 6.0 Medium
- wazuh Wazuh Vulnerable to Heap-based Buffer Out-Of-Bounds WRITE in decode_win_permissions 6.3 Medium
- keyence corporation kv studio KV STUDIO versions 12.23 and prior contain a buffer underflow vulnerability. If the product uses... 7.1 High
- imagemagick ImageMagick has Stack Buffer Overflow in image.c 7.4 High
- google android, mediatek software development kit, mediatek, inc. mt6639, mt6653, mt6985, mt6989, mt6990, mt6991, mt7925, mt7927, mt8196, mt8678, mt8796 +1 more +3 more In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead... 6.5 Medium
- google android, mediatek software development kit, mediatek, inc. mt2718, mt6639, mt6653, mt6985, mt6989, mt6990, mt6991, mt7925, mt7927, mt8113, mt8115, mt8127, mt8163, mt8168, mt8169, mt8173, mt8183, mt8186, mt8188, mt8195, mt8196, mt8370, mt8390, mt8391, mt8395, mt8512, mt8516, mt8519, mt8676, mt8678, mt8695, mt8696, mt8698, mt8786, mt8792, mt8796, mt8893 +1 more +3 more In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead... 6.5 Medium
- fortinet forticamera, fortimail, fortindr +4 more +6 more A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiVoice versions 7.2.0, 7.0... 9.6 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +34 more +36 more Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar 4.8 Medium
- fortinet fortios, fortios-6k7k, fortiproxy +5 more +7 more A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of... 9.3 Critical
- zoom workplace, zoom communications, inc workplace apps, zoom meeting software development kit +4 more +6 more Zoom Apps - Heap-based Buffer Overflow 8.5 High
- zoom workplace, zoom communications, inc workplace apps, zoom meeting software development kit +4 more +6 more Zoom Apps - Buffer Underflow 8.5 High
- huawei b612 firmware, 4g router b612 +1 more There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may... 4.3 Medium
- adobe animate Animate | Buffer Underwrite ('Buffer Underflow') (CWE-124) 7.8 High
- sammycage lunasvg lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext... 7.5 High
- intel pcm, performance counter monitor +1 more Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated... 7.5 High
- capnproto Cap'n Proto WebSocket message can cause crash 5.9 Medium
- accusoft imagegear A heap-based buffer overflow vulnerability exists in the create_png_object functionality of... 7.0 High
- c-ares, debian linux, fedoraproject fedora +2 more Buffer Underwrite in ares_inet_net_pton() 4.1 Medium
- hancom office 2020 A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0... 7.8 High
- cisco ios xe software, ios xe +1 more Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability 8.6 High
-
pocketmine/bedrock-protocolPackagist Buffer length underflow in LoginPacket causing unchecked exceptions to be thrown 7.5 High - insyde kernel, tianocore edk ii, edk2 +2 more Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize. 7.4 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 more XMP Toolkit SDK SVG_Adapter ParseFullNS Buffer Underflow 7.8 High
- insyde kernel, tianocore edk ii, edk2 +2 more NetworkPkg/IScsiDxe has remotely exploitable buffer overflows. 8.1 High
- ultravnc UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can... 9.8 Critical
- strongswan, canonical ubuntu linux, debian linux +2 more In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer... 6.5 Medium
- microsoft windows, windows 7, windows 8 +7 more +9 more Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows... 9.3 High